According to HIPAA, we're required to MFA enforced whenever if user is admin. Has anyone worked through NIST 800-53 certification with legacy user accounts before? We need to review web-facing...

Can someone from GRC verify these PII before I include them in the compliance audit? I'll compile our findings into a compliance audit and distribute it by next audit cycle. The preliminary...